TOP SECRET//SI//NOFORN 




BOUNDLESSINFORMANT 

Describing Mission Capabilities from Metadata Records 
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The Question 



(U//FOUO) How do we describe the 

collection capabilities and posture of 
our SIGINT infrastructure? 
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The Old Way 



(U//FOUO) Typical SIGINT Data Calls/Questions 

1 . How many sites do we have in the region? How many records are they 
producing? 

2 . What type of coverage do we have on country X? 

3 . What type of collection and volume do we get out of site A? How do these 
types/volumes compare against site B? Against site C? 



(U//FOUO) Wavs to Get Answers 

1. Map out the physical location of SIGINT assets 

2 . Send out a data call based on best guesses for who can answer the 
question 

3 . Review static reports/spreadsheets from previous data calls 

4. Ask a 30-year SIGINTer 
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The New Way boundlessinformant 



(U//FOUO) Use Big Data technology to query SIGINT collection in the cloud to 
produce near real-time business intelligence describing the agency’s available 
SIGINT infrastructure and coverage. 



(U//FOUO) Key Questions 

1. How many records are collected for an organizational unit (e.g. fornsat) or 
country? 

2. Are there any visible trends? 

3. What assets collect against a specific country? What type of collection? 

4 . What is the field of view for a specific site? What type of collection? 



(U//FOUO) Potential Users 

1 . Strategic decision makers (leadership team) 

2. Tactical users (mission and collection managers) 
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Global Access Operations 

w m 



Details 



i) (U//FOUO) Current focus is on SIGINT/COMINT 



2) (U//FOUO) Review every valid DNI and DNR metadata record passing 
through the NSA SIGINT infrastructure 

a) (U//FOUO) For the Map View, only display aggregated counts of records with a 
normalized number or an administrative region populated. 

b) (u//fouo) For the Org View, display aggregated counts of every valid record. 

3) (U//FOUO) Raw data, analytics, and back-end database are all conducted in 
the cloud (HDFS, MapReduce, Cloudbase). 



(U//FOUO) BOUNDLESSINFORMANT is hosted entirely on corporate services 
and leverages FOSS technology (i.e. available to all NSA developers). 
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Demo 
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Road Map 



1) (U//FOUO) Add technology type (e g. juggernaut, loper) to provide additional 
granularity in the numbers 

2) (u//fouo) Integrate Site Similarity capability (i.e. Gephi Charts) 



3) (u//fouo) Anomaly detection and alerts 

4) (u//Fouo) Other “INT” data (e.g. ELINT, FISINT) 



5 ) (u//fouo) Add survey data and display delta between collected metadata 
and survey data 

6 ) (u//fouo) Add in selected (vs. unselected) data indicators 
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Org View 



Site Specific 







